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SUBJECT SENDS ITS PUBLIC KEY 
AND IDENTIFICATION ATTRIBUTES 
TO CERTIFICATE AUTHORITY 



SUBJECT DEMONSTRATES 
KNOWLEDGE OF THE PRIVATE KEY 
ASSOCIATED WITH ITS PUBLIC KEY 



SUBJECT DEMONSTRATES TO 
CERTIFICATE AUTHORITY THAT 
IDENTIFICATION ATTRIBUTES 
APPLY TO SUBJECT 



CERTIFICATE AUTHORITY CREATES 
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CERTIFICATE DATABASE 
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VERIFIER CONTAINING UNSIGNED |/ 
CERTIFICATE 



IF EXPIRATION FIELD IS PRESENT 
IN UNSIGNED CERTIFICATE, 
VERIFIER VERIFIES THAT 
EXPIRATION DATE/TIME IN 
EXPIRATION FIELD HAS NOT 
EXPIRED 



VERIFIER COMPUTES THE 
CRYPTOGRAPHIC HASH OF THE 
UNSIGNED CERTIFICATE AND 
VERIFIES THAT THE COMPUTED 
CRYPTOGRAPHIC HASH IS 
PRESENT IN HASH TABLE 



SUBJECT DEMONSTRATES 
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CERTIFICATE AUTHORITY OBTAINS 
UNSIGNED CERTIFICATE FROM 
CERTIFICATE DATABASE AND 
COMPUTES CRYPTOGRAPHIC HASH 
OF THE UNSIGNED CERTICICATE 
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CERTIFICATE AUTHORITY SENDS A 

MESSAGE TO EACH VERIFIER 
CONTAINING THE CRYPTOGRAPHIC 
HASH COMPUTED IN STEP 402 AND 
REQUESTS THAT EACH VERIFIER 
REMOVE THE CRYPTOGRAPHIC 
HASH FROM ITS HASH TABLE 



EACH VERIFIER REMOVES THE 
CRYPTOGRAPHIC HASH RECEIVED IN 
STEP 304 FROM ITS HASH TABLE AND 
NOTIFIES CERTIFICATE AUTHORITY 
THAT THE CRYPTOGRPAHIC HASH IS 
REMOVED FROM ITS HASH TABLE 



CERTIFICATE AUTHORITY COLLECTS 
THE NOTIFICATIONS SENT BY EACH 
VERIFIER IN STEP 306 AND DEEMS 
THAT THE REVOCATION OF 
UNSIGNED CERTIFICATE IS 
COMPLETED WHEN NOTIFICATIONS 
ARE RECEIVED FROM ALL VERIFIERS 
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